seoul-subway-arrival

Warn

Audited by Socket on Apr 13, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s transit purpose is narrow and read-only, but its actual data flow is inconsistent with the claim of using the official Seoul API because all requests are funneled through an arbitrary proxy host. No malware or installer behavior is present, but the proxy mediation introduces medium security risk and trust concerns.

Confidence: 90%Severity: 58%
Audit Metadata
Analyzed At
Apr 13, 2026, 01:00 AM
Package URL
pkg:socket/skills-sh/bedesj%2Fk-skill%2Fseoul-subway-arrival%2F@1565f91e24edd82d3f63420a84eb187e08ba6a36
Security Audit — socket — seoul-subway-arrival